CVE-2022-39177: High severity BlueZ BlueZ vulnerability
BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/bluezto a version that resolves this vulnerability.Fixed in 5.66-1+deb12u2Fixed in 5.66-1+deb12u1Fixed in 5.82-1.1Fixed in 5.87-5 - Upgrade
Upgrade
debian/bluezto a version that resolves this vulnerability.Fixed in 5.61-1
Event History
Frequently Asked Questions
What is CVE-2022-39177?
CVE-2022-39177 is a vulnerability in BlueZ before 5.59 that allows physically proximate attackers to cause a denial of service.
How does CVE-2022-39177 impact BlueZ?
CVE-2022-39177 can be exploited by physically proximate attackers to cause a denial of service on BlueZ.
What is the severity of CVE-2022-39177?
CVE-2022-39177 has a severity rating of 8.8 (high).
Which software versions are affected by CVE-2022-39177?
BlueZ versions before 5.59 are affected by CVE-2022-39177. Specifically, it affects BlueZ on Ubuntu Linux 18.04 LTS, Ubuntu Linux 20.04 LTS, and Debian Linux 10.0.
How can the CVE-2022-39177 vulnerability be mitigated?
To mitigate the CVE-2022-39177 vulnerability, it is recommended to update BlueZ to version 5.59 or later.